{"id":"CVE-2019-0301","aliases":["EUVD-2019-1074","GHSA-c78m-cj58-772c"],"status":"published","title":"Under certain conditions, it is possible to request the modification of role or privilege...","description":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0111,"percentile":0.6614,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2019-05-14T20:22:32Z","modified":"2026-06-17T02:08:08Z","products":[{"vendor":"sap","product":"identity_management"},{"vendor":"sap se","product":"sap identity management (rest interface)"}],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/2784307","tags":["x_refsource_MISC","x_transferred","Permissions Required","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0301"},{"url":"https://github.com/advisories/GHSA-c78m-cj58-772c"}],"sources":{"cve":[{"id":"CVE-2019-0301","description":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.","status":"published","published":"2019-05-14T20:22:32Z","modified":"2024-08-04T17:44:16.388Z","updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-1074","description":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.","status":"published","published":"2019-05-14T20:22:32Z","modified":"2024-08-04T17:44:16Z","updated_at":"2026-11-03T03:07:02.049822Z"}],"ghsa":[{"id":"GHSA-c78m-cj58-772c","title":"Under certain conditions, it is possible to request the modification of role or privilege...","description":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.","status":"published","published":"2022-05-24T16:45:38Z","modified":"2024-04-04T00:38:53Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:55:50.552757Z"}],"nvd":[{"id":"CVE-2019-0301","description":"Under certain conditions, it is possible to request the modification of role or privilege assignments through SAP Identity Management REST Interface Version 2, which would otherwise be restricted only for viewing.","status":"published","published":"2019-05-14T21:29:01.013Z","modified":"2026-06-17T02:08:08.803Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:05:13.880207Z"}]}}